Page Source for VpnInstall
=begin options
write = root
=end options
=head2 VPN Installation Instructions
=head3 To install and use Diamondcard.us VPN service for your
softphone:
1.
L<Download|http://www.openvpn.net/index.php/open-source/downloads.ht
ml> and install OpenVPN Community package for your platform. Any
version of OpenVPN will work, installation instructions are within the
downloaded package, you just need to install openvpn binary, there is
no need to configure it and/or generate keys. If you want to run VPN
service on Mac, you may use free
L<Tunnelblick|http://code.google.com/p/tunnelblick/> or any other
OpenVPN client for Mac.
2. Download "VPN package" for EU or US server (or both) from your
personal backend or using the links found in your purchase confirmation
mail. For US server you will download I<NNNN>-us.zip and for EU
server you will download I<NNNN>-eu.zip archive (NOTE:
I<"NNNN"> is your diamondcard.us user Id, like 12345).
3. Un-zip downloaded file(s) in I</etc/openvpn> directory (Linux)
or I<C:\Program Files\OpenVPN\config> (Windows);
4. On Linux: Load tun0 device: to do this run "I<sudo modprobe
tun>" (requires "root" privileges). After that, change to
I</etc/openvpn> directory and run "I<sudo openvpn eu.ovpn>"
if you are closer to our EU servers or "I<sudo openvpn us.ovpn>"
if you are closer to US server (both commands require root privileges).
After OpenVPN connection is established (you will receive
"I<Initialization Sequence Completed>" message), launch your
softphone and make a test call to #441. If test call was successful,
start using your secure connection by making or receiving your calls.
You may leave OpenVPN connection running for as long time as you need
it - it does not interfere with other services or applications on your
computer. To stop secure link just quit OpenVPN by pressing Ctrl-C in
the window you run it - after that all you VoIP calls will go unsecure.
To launch openvpn you may create a desktop icon accordingly with your
window manager rules.
5. On Windows: Right click eu.ovpn if you are closer to our EU servers
or us.ovpn (for US servers) file and select "Start OpenVPN on this
config file", after OpenVPN connection is established (you will receive
"I<Initialization Sequence Completed>" message), run your
softphone and make a test call to #441. If test call was successful,
start using your secure connection by making or receiving your
calls.You may leave OpenVPN connection running for as long time as you
need it - it does not interfere with other services or applications on
your computer.
=head3 To install OpenVPN service for Yealink T20/22/26/28/Wp52
handset:
To setup OpenVPN for Yealink hardphones, follow L<Yealink OpenVPN
instructions|https://wiki.noojee.com.au/@api/deki/pages/119/pdf>.
Please note, for the Yealink Wp52, the right path in the
I<vpn.cnf> file is I</config/openvpn/keys/>. Here is the
example of I<vpn.cnf>:
client
port 1194
dev tun
tun-mtu 1500
remote SERVER 1194
ns-cert-type server
ca /config/openvpn/keys/CC-ca.crt
cert /config/openvpn/keys/NNNN-CC.crt
key /config/openvpn/keys/NNNN-CC.key
comp-lzo
NOTE: I<"NNNN"> is your diamondcard.us user Id, like 12345,
I<"CC"> is location code: "eu" or "us", I<"SERVER"> is our
OpenVPN server closest to you location: star.dreamtime.net if you are
in the US and diamondcard.us if you are in EU or Asia. You will find
all I<.crt> and I<.key> files in OpenVPN setup pack you
will download when you signup to OpenVPN service.
When connected to the VPN the Yealink WP52 DECT handset screen displays
a small I<VPN> icon on the top.
E<nbsp>E<nbsp>E<nbsp>E<nbsp>I<Thanks
Mr.Julien Fiches for Yealink OpenVPN hints!>
=head3 To install VPN service for your hardphone or router:
1. Make sure your device supports OpenVPN protocol;
2. Un-zip downloaded file(s) in a separate directory, upload *.key and
*.crt files to your device;
3. If you are closer to our EU servers, configure your device to
connect to diamondcard.us server, port 1194, UDP protocol, private key
I<NNNN>-eu.key, certificate I<NNNN>-eu.crt and certificate
authority eu-ca.crt files ("I<NNNN>" is your diamondcard.us user
Id, like 12345). Please follow your device OpenVPN instructions for
details;
4. If you are closer to our US servers, configure your device to
connect to star.dreamtime.net server, port 1194, UDP protocol, private
key I<NNNN>-us.key, certificate I<NNNN>-us.crt and
certificate authority us-ca.crt files ("I<NNNN>" is your
diamondcard.us user Id, like 12345). Please follow your device OpenVPN
instructions for details;